On: Google CA Root Inclusion Request

[geofft]

Why is there more risk of sites being blacklisted with this model than with existing mechanisms? Google Safe Browsing can always ban your site. If you say "But people can turn off Safe Browsing," I'll counter with "But people can install their own CA."

[walterbell → geofft]

It's easier to move content to a new domain name than to a new legal identity.

[geofft → walterbell]

And certificates for webpackages attest domain name, not legal identity, right?

[walterbell → geofft]

They attest legal identity - watch the Chrome demo video.